EDB-37812
functionalSymantec Endpoint Protection Manager - Authentication Bypass / Code Execution (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2015-08-18catalog exploit_db
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-1489US | high8.5 | Exploit | ||
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors. | ||||
| CVE-2015-1487US | medium5.5 | Exploit | ||
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to arbitrary files, and consequently obtai… | ||||
| CVE-2015-1486US | high7.5 | Exploit | ||
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authentication via a crafted password-reset action… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan